Configuring Host Checker Restrictions - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

Configuring Host Checker Restrictions

Copyright © 2010, Juniper Networks, Inc.
To configure realm-level restrictions:
In the NSM navigation tree, select Device Manager> Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to realm-level restrictions.
Click the Configuration tab. In the configuration tree,
3.
select Administrators > Admin Realms > Select Realm > Authentication Policy
> Host Checker to configure administrator realm-level restrictions.
select Users > User Realms > Select Realm > Authentication Policy > Host Checker
to configure user realm-level restrictions.
Configure realm-level restrictions.
4.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
Role—When the Infranet Controller determines the list of eligible roles to which it can
map an administrator or user, it evaluates each role's restrictions to determine if the role
requires that the user's computer adheres to certain Host Checker policies. If it does and
the user's computer does not follow the specified Host Checker policies, then the Infranet
Controller does not map the user to that role unless you configure remediation actions
to help the user bring his computer into compliance.
To configure role-level restrictions:
In the NSM navigation tree, select Device Manager> Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to role-level restrictions.
Click the Configuration tab. In the configuration tree,
3.
select Administrators > Admin Roles > Select Role > General > Restrictions to
configure administrator role-level restrictions.
select Users > User Roles > Select Role > General > Restriction to configure user
role-level restrictions.
Configure role-level restrictions.
4.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
To configure Host Checker restrictions:
Chapter 15: Configuring Host Checker Policies
173